Your school's data. Hosted in India. Compliant by design.
We treat student data with the same care a principal would — locked down, audited, and never shared without consent.
AWS Mumbai (ap-south-1)
All customer data hosted in India — no cross-border transfer. Compliant with DPDPA §16 on data localisation.
Encryption at rest & in transit
AES-256 encryption at rest. TLS 1.2+ for all data in transit. Separate encryption keys per tenant.
Automated daily backups
Full database snapshots daily with 30-day retention. Point-in-time recovery available on Enterprise plans.
Audit logs on sensitive actions
Every fee deletion, marks edit, and record modification is logged with timestamp, user, IP, and reason. Immutable.
DPDPA compliance posture
Aligned with India's Digital Personal Data Protection Act, 2023. Data Processing Agreements available on request. Consent management for parent data.
ISO 27001 — in progress
We are pursuing ISO 27001 certification. Our controls are structured around ISMS principles. Expected: 2026.
Security FAQ
- Where is data hosted?
- AWS Mumbai region (ap-south-1).
- How often is data backed up?
- Automated daily backups with 30-day retention. Point-in-time recovery available on Enterprise plans.
- Is there an audit log?
- Yes. Every user action that modifies records (fee deletion, marks edit, admission edit) is logged with timestamp, user, and reason.
Need our security documentation?
We share our Data Processing Agreement and security questionnaire on request — usually within 48 hours.